CSIDB logo
Incident

South Amherst Middle School

Incident posture

Attack window
Dec 2020
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2026-01-09 18:33

Linked entities

Victim
South Amherst Middle School
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Dec 2020
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A seventh-grade online class at South Amherst Middle School was disrupted when an unauthorized individual posing as a student joined a Zoom meeting and displayed pornography. The teacher promptly removed the intruder, leading the institution to suspend all live-streamed classes while implementing enhanced security measures.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On December 14, 2020, a seventh-grade online class at South Amherst Middle School, part of the Firelands School District in Ohio, experienced a disruptive intrusion during a Zoom session. An unauthorized individual gained access to the virtual classroom by posing as a student and displayed explicit pornographic content on their screen during the live meeting. The teacher promptly identified the intrusion and removed the unauthorized account from the virtual classroom, terminating the disruptive incident within the session. Following this breach, the school administration suspended all live-streamed online classes across the building as an immediate containment measure. District officials confirmed the incident through emails sent to parents, characterizing the event as a targeted "Zoom bombing" attack that compromised the integrity of the virtual learning environment.

The incident directly impacted instructional continuity, forcing the temporary cessation of real-time virtual instruction while the district evaluated security protocols. School administrators prioritized implementing enhanced security measures for virtual platforms before resuming live classes, though specific technical safeguards weren't disclosed in communications. No additional compromised systems or broader district-wide disruptions beyond the middle school's live classes were indicated in available reports. The district maintained transparency by acknowledging the incident to parents and media outlets like The Chronicle-Telegram, though no further details regarding investigation methods, perpetrator identification, or long-term academic consequences were provided. The building-level suspension of Zoom-based instruction remained active at the time of reporting as the district focused on preventing recurrence through security improvements.

Sources

Sources available to members: 1 source.

CSIDB